$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: vqe9mB+BI2Q2MoDFkugvqMbIQWWG25dElg90AiYmpls= Subject key identifier: 56:0B:9D:D6:8F:E1:DF:56:77:48:9B:7E:49:CC:FE:26:4A:A5:9A:DF Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 504F26E90C1C8643C17BEB6B64C20D6AD2902BF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 10 Signing time: Mon 28 Apr 2025 17:51:25 +0000 Manifest this update: Mon 28 Apr 2025 17:46:25 +0000 Manifest next update: Thu 01 May 2025 20:33:25 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) 2: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: jz6CtTolR6mI5rxOOUVMWHpONoOrxOqcPdfN123Ss5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4f:26:e9:0c:1c:86:43:c1:7b:eb:6b:64:c2:0d:6a:d2:90:2b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Apr 28 17:46:25 2025 GMT Not After : May 1 20:33:25 2025 GMT Subject: CN=560B9DD68FE1DF5677489B7E49CCFE264AA59ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:cc:fe:5a:f4:9f:d1:94:5e:e2:05:98:f4: 3b:3d:f5:63:cb:14:60:f8:00:3a:9a:e4:34:59:eb: 00:fc:83:69:d4:41:2e:9f:e4:23:7e:46:b0:b9:cc: 0a:54:69:9f:c9:f9:7a:17:3d:c1:c0:30:ed:fc:e0: 0b:c9:39:19:20:e3:a5:22:62:de:c6:70:af:fb:dc: d6:14:64:1c:c9:c2:b2:b2:dc:11:fe:9f:79:c9:db: 98:b7:b4:53:da:93:28:07:1d:7c:b0:dc:75:ce:f7: 79:fa:14:d3:6b:79:b8:2e:22:45:c5:9c:66:13:fa: a6:85:a2:a9:39:d5:c2:09:ed:4d:17:7c:56:8e:ed: 3c:9f:ff:a0:b0:46:a5:4c:7f:e3:89:dc:14:aa:3f: a5:1a:3c:23:9d:33:76:66:dd:f4:6e:bb:0f:bc:0e: 9e:9a:cf:71:cb:db:ee:6c:25:7a:04:17:a1:f1:6f: 07:33:68:a0:34:4b:c8:72:1b:7b:66:7c:46:4a:46: 50:94:c5:bc:3c:3c:fd:d5:ee:2a:d1:92:2a:69:f7: f0:f6:31:2d:ae:8d:d5:38:79:fb:fd:17:6a:ec:a2: d1:6c:f4:7b:2e:5c:8c:1d:58:3e:b7:53:5c:59:4e: 4f:28:cf:ec:a2:2e:94:88:38:7b:2f:ef:5e:b6:e3: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0B:9D:D6:8F:E1:DF:56:77:48:9B:7E:49:CC:FE:26:4A:A5:9A:DF X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:43:c6:80:48:79:eb:50:bf:37:cf:de:ee:b4:64:e9:64:5c: f7:97:9e:e3:5d:fc:b6:1a:1f:30:07:26:fd:c4:1a:f2:3e:4c: fe:7b:dc:c2:34:1f:56:83:87:f9:6a:b3:98:76:67:1b:30:23: 0b:f0:58:6c:e6:ec:d1:ad:fc:77:07:d3:20:5a:08:27:04:fb: b9:c8:04:e5:92:dc:14:60:b2:29:3a:ef:01:09:9a:e8:4c:18: cb:d6:4f:bd:97:40:f3:e4:40:68:3c:9d:14:29:7e:93:92:cc: 8f:11:81:6b:b4:b7:59:7b:b7:bd:70:66:10:32:2b:f4:20:7a: 6a:1e:c6:b2:2d:52:b1:2b:f3:aa:45:4c:c0:a0:2b:99:09:78: 24:47:aa:80:df:a4:78:69:03:5b:99:0d:bc:3d:e6:b2:73:8e: 58:f9:57:2b:61:f1:65:3a:9e:f1:6c:d0:a7:eb:bb:a4:df:1e: 87:43:f4:b5:ca:17:a2:1d:91:37:12:9e:57:94:a5:7c:f0:e0: a1:28:cb:6e:04:0c:6e:9e:9e:9f:67:a3:88:0b:2d:98:65:98: 05:40:62:42:1e:d6:62:65:db:b8:69:1c:9d:3e:08:47:f7:e7: 59:f2:41:b2:ef:35:ce:b9:8d:46:66:93:b2:60:ad:f3:2e:bc: 81:42:fa:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE8m6QwchkPBe+trZMINatKQK/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTA0MjgxNzQ2MjVaFw0yNTA1MDEyMDMzMjVaMDMxMTAvBgNV BAMTKDU2MEI5REQ2OEZFMURGNTY3NzQ4OUI3RTQ5Q0NGRTI2NEFBNTlBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0cz+WvSf0ZRe4gWY9Ds99WPL FGD4ADqa5DRZ6wD8g2nUQS6f5CN+RrC5zApUaZ/J+XoXPcHAMO384AvJORkg46Ui Yt7GcK/73NYUZBzJwrKy3BH+n3nJ25i3tFPakygHHXyw3HXO93n6FNNrebguIkXF nGYT+qaFoqk51cIJ7U0XfFaO7Tyf/6CwRqVMf+OJ3BSqP6UaPCOdM3Zm3fRuuw+8 Dp6az3HL2+5sJXoEF6HxbwczaKA0S8hyG3tmfEZKRlCUxbw8PP3V7irRkipp9/D2 MS2ujdU4efv9F2rsotFs9HsuXIwdWD63U1xZTk8oz+yiLpSIOHsv716243HbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVgud1o/h31Z3SJt+Scz+Jkqlmt8wHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANDxoBIeetQvzfP3u60ZOlkXPeXnuNd/LYa HzAHJv3EGvI+TP573MI0H1aDh/lqs5h2ZxswIwvwWGzm7NGt/HcH0yBaCCcE+7nI BOWS3BRgsik67wEJmuhMGMvWT72XQPPkQGg8nRQpfpOSzI8RgWu0t1l7t71wZhAy K/QgemoexrItUrEr86pFTMCgK5kJeCRHqoDfpHhpA1uZDbw95rJzjlj5Vyth8WU6 nvFs0Kfru6TfHodD9LXKF6IdkTcSnleUpXzw4KEoy24EDG6enp9no4gLLZhlmAVA YkIe1mJl27hpHJ0+CEf351nyQbLvNc65jUZmk7JgrfMuvIFC+rg= -----END CERTIFICATE-----Generated at Wed Apr 30 03:38:53 2025 by rpki-client